Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          uVZvXj65IHXpem84YmY0VwI9p3bdFlr553gjetqy8r0=
Subject key identifier:   FA:F9:C4:7B:6F:8C:F8:1F:5E:15:9D:2E:79:57:75:54:85:CB:39:D8
Certificate issuer:       /CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
Certificate serial:       6CB76BAA73A6D86A43B60C6A038533B439CDFD89
Authority key identifier: EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
Signing time:             Fri 03 May 2024 20:01:21 +0000
ROA not before:           Fri 03 May 2024 19:56:21 +0000
ROA not after:            Fri 02 May 2025 20:01:21 +0000
asID:                     262659
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:6b:aa:73:a6:d8:6a:43:b6:0c:6a:03:85:33:b4:39:cd:fd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Validity
            Not Before: May  3 19:56:21 2024 GMT
            Not After : May  2 20:01:21 2025 GMT
        Subject: CN=FAF9C47B6F8CF81F5E159D2E7957755485CB39D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:39:1c:7c:82:78:e1:72:58:bb:89:70:a8:
                    aa:66:1a:63:8d:40:a3:8f:56:eb:82:dc:7a:c9:f3:
                    7b:ac:cf:18:ac:06:46:09:c5:48:5f:89:4d:60:7a:
                    f8:da:b4:2e:0e:87:7e:1e:4d:28:2a:a9:38:c4:0f:
                    1d:00:b8:8b:84:9d:31:62:e4:77:76:0d:f7:4f:2c:
                    7e:3a:21:85:db:49:5f:cd:6a:db:16:59:4c:50:95:
                    97:8d:b6:49:ee:97:60:1b:40:44:71:05:07:8e:7c:
                    f8:27:ce:58:af:97:01:2b:87:2b:f8:27:31:d8:0c:
                    b7:f8:3b:f4:a5:1b:4e:1d:79:7c:91:d1:b2:df:3d:
                    d7:96:b3:33:87:7f:e3:f6:58:52:f9:9e:53:51:14:
                    ce:20:1a:25:a4:8a:fd:94:60:38:38:ff:7d:aa:98:
                    fb:bc:f2:28:97:cd:a1:1a:0c:54:ff:d3:32:6d:70:
                    30:5a:5c:ae:f2:6a:31:ee:47:3e:1b:66:fc:67:b2:
                    5c:10:a9:7d:3f:56:6a:e9:2d:07:65:5a:7a:1b:b5:
                    de:5f:93:9b:d6:1c:28:53:58:cd:b8:04:2e:c3:ff:
                    e8:1c:b0:79:f6:44:32:3f:c5:3b:6a:9e:17:48:71:
                    36:d1:bb:17:00:b0:7b:91:80:a0:f8:cf:99:eb:0d:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F9:C4:7B:6F:8C:F8:1F:5E:15:9D:2E:79:57:75:54:85:CB:39:D8
            X509v3 Authority Key Identifier:
                keyid:EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:1a:98:b6:96:b9:d7:fb:69:46:4b:77:dc:8c:ef:2d:59:
         e7:d6:f1:26:18:0e:93:1e:7a:0a:9d:02:3a:82:3f:cb:5c:2c:
         dd:65:37:5f:5a:7d:bf:ba:dc:03:cf:60:65:0d:cf:f6:01:8e:
         11:d1:f3:7f:cf:7f:e6:4d:a7:b9:24:97:22:3d:6d:0e:1d:49:
         26:19:69:93:6d:21:aa:b3:7b:37:3b:96:37:4a:05:f7:d8:a4:
         9e:6f:5c:51:43:28:ca:9c:c5:3c:6e:65:1c:5f:05:2b:56:63:
         37:c6:2d:0d:aa:01:30:59:8f:5e:6f:4a:c4:d7:2b:a6:ed:f0:
         e6:95:87:5c:75:85:91:6b:76:2d:2e:61:88:00:61:8d:88:40:
         e2:e0:7f:b6:77:7d:2e:28:f2:41:6f:08:e9:26:ef:4f:c5:fb:
         f9:d1:15:49:f9:14:b2:1f:ec:04:47:05:68:0f:30:16:50:6c:
         b5:9a:f4:46:33:ae:5d:99:39:b6:e8:73:dd:77:77:5f:de:b4:
         6e:6a:25:aa:5b:85:66:43:1a:4a:e7:cc:bf:1a:76:8b:05:77:
         00:9b:e1:0f:05:72:04:80:d9:38:f5:af:c9:d6:b4:1f:18:c5:
         70:69:7d:e4:25:bb:f4:b7:66:78:9d:4c:88:b4:a8:f7:e3:ed:
         90:7c:c9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org